...
In cases where you have configured restrictive Network Security Groups (NSG) that limit out-bound traffic, you should confirm that outbound probes to NTP servers are permitted. Typically, this traffic operates on UDP port 123. No special in-bound rules are required, since NSGs at Azure are stateful.
...